Image capture package secure database access method

ABSTRACT

A method authorizes the holder of a film unit to access a look-up table having stored data The film unit bears an access code having an encrypted first segment. In the method, the film unit is registered and the first segment is detected. The first segment is decrypted to obtain a code value. The code value is matched to a second segment and access to the stored data is allowed.

CROSS REFERENCE TO RELATED APPLICATIONS

Reference is made to commonly assigned co-pending U.S. patentapplications Ser. No. 09/221,340, entitled: METHOD FOR HANDLING FILMCUSTOMIZATION DATA AND SYSTEM, and filed in the names of David Cipollaand David C. Smart; Ser. No. 09/221,341, entitled: METHOD FORASSOCIATING A FILM UNIT AND A ONE-TIME USE CAMERA, and filed in thenames of David Cipolla and David C. Smart; Ser. No. 09/221,858,entitled: PHOTOFINISHING METHOD, PHOTOFINISHING APPARATUS, AND SYSTEM,and filed in the names of David C. Smart and David Cipolla; Ser. No.09/221,247, entitled: METHOD FOR STORING EXPOSURE DEPENDENT AND EXPOSUREINDEPENDENT INFORMATION RELATED TO A PHOTOGRAPHIC FILM UNIT, and filedin the names of David C. Smart and David Cipolla; Ser. No. 09/221,943,entitled: FILM UNIT, METHOD FOR ENABLING SECURE CUSTOMIZATION OF A FILMUNIT, AND SYSTEM, and filed in the names of David C. Smart and DavidCipolla; Ser. No. 09/221,425, entitled: METHOD FOR HANDLING USER ANDPRODUCER FILM UNIT CUSTOMIZATION DATA AND SYSTEM, and filed in the namesof David Cipolla, David C. Smart, and Robert Luke Walker; Ser. No.09/221,420, entitled: METHOD FOR COMPENSATING FOR FILM UNIT DEFECTS ANDSYSTEM, and filed in the names of David C. Smart and David Cipolla; Ser.No. 09/221,425 now U.S. Pat. No. 6,104,877, entitled: METHOD FOR KEEPINGPHOTOGRAPHIC FILM CURRENT, and filed in the names of David C. Smart,David Cipolla, and David A. Hodder; Ser. No. 09/221,756, entitled:METHOD FOR TRACKING THE LIFE CYCLE OF FILM UNITS AND SYSTEM, and filedin the names of David Cipolla and David C. Smart; Ser. No. 09/221,249,entitled: METHOD FOR ARCHIVING FILM UNIT INFORMATION, and filed in thenames of David C. Smart and David Cipolla, each of which are assigned tothe assignee of this application. The above cross-referencedapplications are hereby incorporated herein by reference.

FIELD OF THE INVENTION

The invention relates to photography and more particularly relates to animage capture package secure database access method.

BACKGROUND OF THE INVENTION

Through the years, one of the great satisfactions of photography hasbeen the ability to make many different kinds of final images from acaptured image. On the other hand, the manual efforts required and costsinvolved have generally limited most people to a small number ofstandard photographic features. The number of features readily andcheaply available has gradually increased over time. Photofinishingoriginally required manual input at every stage, but automation hasgradually had some effect; initially in the detection of film type frommachine readable encodements for sorting purposes.

The use of encodements to provide features like zooming and croppinghave been taught, for example, in U.S. Pat. Nos. 4,650,304; 4,583,831;5,059,993; 5,619,738; and 5,132,715. The Advanced Photo System™(ADVANCED PHOTO SYSTEM™) has implemented the use of encodements on filmto automatically print images in different formats and magnifications,to print various exposure related information on film, and to adjust forlighting conditions at the time of exposure.

Other uses of encodements have also been described. U.S. Pat. No.5,758,216 discloses photography systems, film units, and cameras inwhich a one-time use camera or film unit bears external indicia of aspecial promotion and the enclosed film has a corresponding magneticencodement. Disclosed special promotions include photomontages(composite images) with pre-exposed or digitally superimposed cartooncharacters and other symbols, super saturated color processing andenhanced size prints. U.S. Pat. No. 5,726,737 discloses photographysystems, film units, and cameras in which a one-time use camera or filmunit bears external indicia of a preferential subject matter; such asaction shots, scenic shots, and close-ups; and the enclosed film has acorresponding magnetic encodement. U.S. Pat. No. 5,758,216 and U.S. Pat.No. 5,726,737 disclose modifications of the entire image to provide forsuper saturated prints and preferential subject matter respectively.U.S. Pat. No. 5,461,440 discloses an image modification that uses anencodement on film and corrects for particular image qualitydegradations. U.S. Pat. No. 5,323,204 discloses use of an encodement toprovide changes in aspect ratio and indicates that encodements mightpermit enhancement of image quality beyond negative quality tocompensate for film or camera based limitations, artifacts, or errors.Examples of enhancements are noise suppression, sharpness enhancement,and tone scale modification.

The nature of the encodement itself, that is, the media used and thechange in that media, has varied greatly. Encodements that are unchangedfor a particular film type are generally provided as a permanent featureof the film, or film container, or both. For example, Type 135 filmcanisters have a pattern of electrically conductive and non-conductivepatches. Encodements for variable features must be provided in anothermanner. U.S. Pat. No. 4,678,300 teaches an encodement in the form of ascratch on the outside of a film container. In the ADVANCED PHOTOSYSTEM™, encodements for are exposed spots on film or recordings on amagnetic layer. U.S. Pat. No. 4,500,183 discloses storage of “flag data”and other information on a magnetic disk or portion of a film cassetteor on a random access semiconductor memory (“RAM”) contained in a filmcassette. U.S. Pat. No. 5,036,344 discloses the use of a film camerahaving an “IC card” that includes semiconductor memory, a microcomputer,and the like. The card provides continuous access to the information.

The various encodement media discussed above, with the possibleexception of scratching the container, all add cost to the film unit.The cost tends to increase with an increase in storage capacity, andapplies to all units, whether the storage capacity is used or not.

U.S. Pat. No. 5,799,219 teaches remote communication of image data andother data recorded on photographic film for photofinishing. An ordernumber is used. European Published Patent Application No. EP 0 860 980A2 teaches the preparation by a user of a print order file which is thentransmitted for photofinishing. U.S. Pat. No. 5,606,365 teaches adigital camera which transmits image information with a cameraidentification code to a networked computer system for processing usingcorrection maps specific to that camera. U.S. Pat. No. 5,765,042 teachesa one-time use camera having a film unit identification number printedon the outside.

It would thus be desirable to provide methods for authorizing access toremote film unit information that use access code encryption.

SUMMARY OF THE INVENTION

The invention is defined by the claims. The invention, in its broaderaspects, provides a method that authorizes the holder of a film unit toaccess a look-up table having stored data. The film unit bears an accesscode having an encrypted first segment. In the method, the film unit isregistered and the first segment is detected. The first segment isdecrypted to obtain a code value. The code value is matched to a secondsegment and access to the stored data is allowed.

It is an advantageous effect of embodiments of the invention thatmethods are provided for authorizing access to remote film unitinformation that use access code encryption.

BRIEF DESCRIPTION OF THE DRAWINGS

The above-mentioned and other features and objects of this invention andthe manner of attaining them will become more apparent and the inventionitself will be better understood by reference to the followingdescription of an embodiment of the invention taken in conjunction withthe accompanying figures wherein:

FIG. 1 is diagrammatical view of an embodiment of a system of theinvention.

FIGS. 2a-2 c are diagrammatical views of an embodiment of a method forhandling photofinishing customization data.

FIG. 3 is a diagrammatical perspective view of an embodiment of aone-time use camera of the system of FIG. 1 being used to photographtrees.

FIG. 4 is a diagrammatical view of an embodiment of the input device ofthe system of FIG. 1.

FIG. 5 is a diagrammatical view of an embodiment of the photofinishingunit of the system of FIG. 1.

FIG. 6 is a diagram of an embodiment of a method for associating a filmunit and a one-time use camera.

FIG. 7 is a diagram of the photofinishing method.

FIGS 8 a and 8 b are diagrams of an embodiment including methods forstoring capture device recorded and exposure independent informationrelated to a film unit and archiving the logical memory unit.

FIG. 9 is a diagram of the method for secure customization of a filmunit.

FIG. 10 is a cut-away, semi-diagrammatical perspective view of a filmunit having an access code and identifier on both a one-time use camerabody and on an included film cassette.

FIGS 11 a-11 c are diagrammatical views of a system including a filmunit access coded for user and producer subunits of a logical memoryunit.

FIG. 12 is a diagram of an embodiment of the secure database accessmethod that comprises the achieving access step of FIG. 11.

FIG. 13 is a diagram of an embodiment of the method for handling userand producer customization data.

FIG. 14 is a diagram of an embodiment of the method for compensating forfilm unit defects.

FIG. 15 is a diagram of an embodiment of the method for keepingphotographic film current and extending the useful life.

FIG. 16 is a diagram of an embodiment of the method for racking the lifecycle of film units.

FIG. 17 is a diagrammatical view of an embodiment of the film unitincluding local data memory and components necessary to utilize thememory.

FIGS. 18-19 are semi-diagrammatical views of embodiments of the filmunit that include a local data memory.

FIGS. 20a and 20 b are diagrammatical views of a system including anaccess coded film unit.

FIGS. 21a-21 b are diagrammatical views of an embodiment of the methodfor archiving a film unit.

DETAILED DESCRIPTION OF THE INVENTION

Referring to FIG. 1, a photography system 250 includes a plurality offilm units 10, a look-up table 12, and one or more photofinishing units14. (The systems, methods, and apparatus disclosed herein all havecommon features and specific embodiments can each include some or all ofthe features discussed herein, except where, as will be apparent fromthe specification, specific features cannot be combined. Referenceshould thus be made to the figures generally in relation to eachembodiment.) The system preferably includes one or more input devices16. The look-up table 12 is provided as a portion of memory in one ormore computing devices 18. Logical memory units 20 in the look-up table12 are allocated to each film unit 10 to hold data for that film unit10. The look-up table 12 is accessible via the input device 16 andphotofinishing units 14.

A film unit 10 is customized by remotely accessing the look-up table 12and changing the data in the respective logical memory unit 20. Thecustomization modifies the photofinishing of the film unit 10 to changethe resulting photofinishing product 22. The customization can add,remove, or change one or more features to provide a wide variety ofdifferent combinations. The film unit 10 itself is only modifiedindirectly, since the customized features are only manifest afterphotofinishing.

The term “photofinishing” is used herein to refer to one or morephysical, chemical, optical, and digital techniques used to visualize,print, or modify an image so as to produce a “final image”, which is aprinted or displayed image or a digital image that is printable ordisplayable. Photofinishing thus includes such techniques as chemicaldevelopment and digital image modification and printing. Photofinishingcan be provided repeatedly for a film unit, but the repetitions may ormay not repeat the same techniques. For example, an initialphotofinishing of a photographic film type film unit will includechemical development. Later photofinishing of the same film unit willnot. A “photofinishing unit” is a device or group of devices providing aphotofinishing function.

The term “film unit” is used herein to refer to media on which imagedata is or can be stored for archival purposes, with or without mediamodification, and physically associated features supporting use of themedia. Each film unit 10 stores or can store a plurality of archivalimages. In a film-type film unit 10, the media is a photographicfilmstrip 36. The support structure of a film-type film unit 10 caninclude a spool on which the filmstrip 36 is wound and canister 38enclosing the filmstrip 36 and spool. The support structure can alsoinclude the features of a one-time use camera 24.

The term “one-time use camera” is used herein to refer to cameras thatare provided to consumers in preloaded form and cannot be reloaded, bythe consumer, without extensive camera disassembly, or replacement ofparts, or use of special tools, or the like. One-time use film camerasare widely available at this time. FIG. 3 illustrates a one-time usecamera 24. Each camera 24 has a camera body 26 and an imaging systemincluding a taking lens 28 that images the subject matter photographed30 on an image plane 32 in the case. The imaging system includes a filmtransporter 34 (illustrated in this figures diagrammatically as acylinder) that transports photographic filmstrip 36, frame by frame,through the image plane 32. The filmstrip 36 captures and stores lightimages as latent images on respective frames of film. In a digital filmunit 10, images are stored in digital form in a memory card or floppydisk or other magnetic, electronic, optical or other memory device.Digital one-time use cameras are limited at this time, for cost reasons,to use in controlled situations in which it can be assured that the usedcamera will be returned to the dealer or producer for reloading, such ascamera rental.

The invention is generally discussed herein in terms of film units 10that are one-time use photographic film cameras 24. It will beunderstood that equivalent considerations apply to other types of filmunits. The film unit 10 is also generally discussed herein in terms ofthe same media being used for both capture and storage of archival imageinformation. It should be understood that stored images may, in somecases, be transferred to a replacement medium or film unit 10, one ormore times. The supporting features may change during the life of thefilm unit. For example, a film unit 10 can start out with the featuresof an Advanced Photo System one-time use photographic film camera 24.After film exposure, the camera body 26 is removed; the filmstrip 36 isremoved from its canister 38 and developed, and is later returned to thefilm canister 38. This film unit 10 is then retained as a cassette 40 ofdeveloped film, with the filmstrip 36 being temporarily extracted forpreparation of photographic prints or other final images as needed. Thestored images are generally treated herein as being realistic images ofthe subject photographed and having the same information content aslatent images, and later, as developed images. It will be understoodthat this is a simplification provided as a matter of convenience forexplanatory purposes and that stored images will differ from reality inmanners well known to those of skill in the art. For example, the storedimages must differ from the original light image, since the storedimages are subject to the limitations of the imaging system and themedia. Film images are subject to limitations such as grain size.Digital images are necessarily pixellated and commonly have color valuespartially extrapolated from neighboring pixels. Digital images may alsobe subject to enhancement modification between capture and storage, forexample, to extrapolate values for pixels degraded by sensor defects.Latent images on film are subject to the chemical and physical effectsof processing. Images are generally stored in a non-realistic form thatrequires modification to render the images viewable. For example,photographic print film stores images as negatives. Digital images mustbe displayed or printed and may require other modification, such asdecryption or modification for a particular display device. Capturedimages may also be subject to deliberate modification by the user at thetime of capture. For example, an image may be modified by use of acolored filter.

Each film unit 10 bears its unique identifier 42 (represented in FIGS.2a-2 c by the letters “X”, “Y”, and “Z”). The identifier 42 is used tolocate the logical memory unit 20 associated with a particular film unit10. The identifier 42 is a number or other alphanumeric ornon-alphanumeric sequence or arrangement which may or may not be humanreadable or machine-readable using a standardized encodement scheme,such as a standard one- or two-dimensional bar code. A particularidentifier 42 is inclusive of the specific sequence or arrangement andits cognates. A cognate is a product of a mathematical function, such asan encryption or decryption function, or other translation, applied tothe sequence or arrangement. A film unit 10 may bear multiple copies ofa sequence or arrangement and any cognates. The term “identifier 42” isinclusive of such multiple copies, but an identifier 42 can be read,without necessarily reading each copy of multiple copies.

The identifier 42 can be recorded on the exterior of the film unit 10 inhuman-readable form 44 or publicly available, standardized-machinereadable form 46. The identifier 42 can be recorded on the film unit 10in a non-public machine-readable form 46. The identifier 42 can havemultiple parts with one part recorded one way and another part recordedanother way. It is convenient that the film unit 10 have an easilyreadable designation (also referred to herein as a “label number”) onthe exterior that can be used in the way serial numbers are used now,for example, to relate film cassettes 40 with index prints. The labelnumber can be used as the identifier 42. This is convenient if the inputdevice 16, discussed in detail below, requires the user to key in theidentifier 42.

With a one-time use camera 24, the identifier 42 is carried by thecassette 40, and also by the camera body 26. The filmstrip 36 within afilm cassette 40 may also carry the identifier 42. It is highlypreferred that the identifiers 42 discussed herein be fully unique, thatis, each identifier 42 is not repeated and each identifier 42 is limitedto a single film unit 10 and a single associated logical memory unit 20.Unique identifiers 42 can be readily provided by use of non-repeatingsequences of numbers or codes. If different producers are likely to usethe same numbers, then it is also desirable that producer identificationalso be included in the identifiers 42 to ensure uniqueness.

The identifier 42 is printed on a film unit 10 or recorded in some othermanner, such as digital recording on an area of magnetic or opticalrecording media. The identifier 42 is human or machine-readable or bothprior to exposure of images. It is preferred that the identifier 42 berecorded independently of the storage of image information, to reducethe risk of damage to the film unit 10 or loss of captured imageinformation or carrying capacity of the film unit 10 when the identifier42 is read. For example, printing an identifier 42 on the exterior of afilm cassette 40 is desirable, since the identifier 42 can be readindependently of the filmstrip 36 inside. Providing an identifier 42only as a latent image on the leader of a filmstrip 36 within a cassette40 is not desirable. Theoretically, the leader of the filmstrip 36 couldbe developed separately before film exposure to allow reading of theidentifier 42, but degradation of the film unit 10 would be likely.

An identifier 42 that is readable before and after exposure of images ispreferred. For example, a Type 135 film cassette can bear a printedidentifier 42 on the exterior and a Type 120 film roll can bear aprinted identifier 42 on the leading and trailing ends of the paperbacking. Both identifiers 42 can be read, before or after film exposure.With some types of film unit 10, the identifier 42 is readable beforeand after film exposure and is also readable during exposure of images.A simple example is an Advanced Photo System™ cassette bearing a printedidentifier on the exterior of the cassette. In an appropriate camerahaving mid-roll film exchange, the film cassette can be unloaded andreloaded at any time.

If the film unit 10 is a one-time use camera 24, it is highly desirablethat the identifier 42 be accessible from the exterior of the camerabody 26, prior to film developing, and be accessible from the exteriorof the film cassette 40 after film developing. It is also desirable thatthe identifier 42 be destroyed at the time of film development so thatthere is no risk that the wrong identifier 42 might be retained on areloaded one-time use camera body 26. A solution is to record separatecopies of the identifier 42 on the film cassette 40 and camera body 26.The copy on the camera body 26 can be recorded as disclosed in U.S. Pat.No. 5,765,042, such that the identifier 42 is destroyed when the exposedfilm cassette 40 is removed from the camera body 26. When the one-timeuse camera body 26 is reloaded, the process is repeated and a copy of anew identifier 42 is placed on the camera body 26.

Referring to FIG. 6, the identifier is recorded (202) on the film unit10. A logical memory unit 20 is associated (204) with that identifier 42as described elsewhere herein. The film unit 10 is loaded (206) in acamera body 26 and the identifier 42 is recorded (208) on the camerabody 26. The camera 24 is placed (210) in packaging 50 and theidentifier 42 is recorded (212) on the packaging 50. Photofinishingparameters 52 are written (214) to the logical memory unit 20, imagesare captured (216), and the images are processed (218) in accordancewith the parameters 52, as in one or more of the methods disclosedherein. The camera body 26 can then be recycled (220) with a new filmunit. As a part of recycling, the original identifier 42 is destroyed onthe camera body 26, for example, by grinding up a cover panel (notseparately illustrated) that includes the identifier and recycling theremainder of the body without the cover panel.

The identifier 42 can be provided both on the film unit 10 and on theexterior of packaging 50 for the film unit 10 to permit customizationwithout removal of the film unit 10 from the packaging 50.

The term “look-up table” refers to both a complement of logical memoryin one or more computing devices 18 and to necessary equipment andsoftware for controlling and providing access to the logical memory.

The term “logical memory unit” refers to a portion of the logical memoryallocated to an individual film unit 10 and is inclusive of hardware andsoftware in the same manner as “look-up table”.

The identifiers 42 are used in the look-up table 12 to identifycorresponding logical memory units 20. The relationship between anidentifier 42 and the associated logical memory unit 20 in the look-uptable 12 can be direct; for example, the logical memory unit 20 canbear, in compressed or uncompressed digital form, the identifier 42 forthe associated film unit 10, or the identifier 42 can be a pointer to anaddress for the logical memory unit 20. The relationship between theidentifier 42 and associated logical memory unit 20 can be indirect. Theidentifier 42 can be distinguished by the structure of a database or bya memory address path, or the relationship between parts of theidentifier 42 and a logical memory unit 20 can be distributed. Forexample, a logical memory unit 20 could have the numeral three toidentify a particular hard disk array, 6 to identify a hard disk, 9 toidentify a logical array, data structure or file, and so on. As anotherexample, an identifier 42 can point to a database element, which canpoint to an element in another database, and so on. In a particularembodiment, the look-up table 12 is structured to associate sequentialidentifiers 42 with sequential table elements. These approaches can becombined and individual elements can be in the same physical componentor multiple components in diverse locations can used by means of one ormore networks.

The allocation of the logical memory unit 20 can be limited to settingaside enough available memory to accommodate data for the film unit 10.The memory set aside does not have to initially include any informationabout the film unit 10. It is preferred, however, that the logicalmemory units 20 be allocated by creating the logical memory units 20 inthe form of individual files or entries. It is further preferred thatthe identifiers 42 be written to the logical memory units 20 for therespective film units 10 or that the look-up table 12 be structured toindicate the identifiers 42 for the respective logical memory units 20,when the logical memory units 20 are allocated. The identifiers 42 canbe written or look-up table 12 be restructured later, when needed; butthis is less controllable and thus likely to increase the risk oferroneous entries or misallocations. The writing of identifiers 42during allocation of logical memory units 20 also ensures that everyfilm unit 10 has, at all times, at least one photofinishing parameter 52in the look-up table 12. The identifier 42 on a film unit 10 can becompared with the identifiers 42 in the look-up table 12 to determine ifthere is an irregularity, such as a misreading of the identifier 42 dueto damage to the film unit 10. It is convenient if the logical memoryunit 20 is associated with the respective film unit 10 in lock-step withthe recording of the identifier 42 on the film unit 10. This assuresthat involved logical memory units 20 can be easily identified whenthere is a breakdown in allocating or identifier 42 printing or thelike.

The memory allocations for individual film units 10 can be created atthe same time or before those film units 10 are made or creation of therespective logical memory units 20 can be delayed up until the time thatthe film units 10 are first customized. Logical memory units 20 can beprovided as portions of physical memory of fixed size, but this iswasteful of resources. Many film units 10 are unlikely to be customizedand thus much space in memory allocations would never be used. It ispreferable to adjust the size of logical memory units 20 as needed. Manycomputer operating systems include a file system, such as afile-allocation-table that adjusts file sizes in this manner. Thelook-up table 12 can utilize such an operating system and provide eachmemory allocation as a separate file. This approach is workable, but isnon-optimal in terms of access time, memory usage, and security. It ispreferred that the memory allocations be handled by database managementsoftware. Access to the database can be provided by the databasemanagement system or through a generalized query language such as SQL(Structured Query Language).

The logical memory units 20 are maintained for a set time orindefinitely. Space required for the logical memory units 20 in thelook-up table 12 can be reduced by limiting the scope of recordedphotofinishing parameters 52 to deviations from default values. In otherwords, the absence of an entry in the logical memory unit 20 for aparticular processing parameter signifies a default value for thatparameter. With a large number of film units 10, the space saved islikely to be very great, since many film units 10 will never becustomized and many photofinishing parameters 52 for customized filmunits 10 will remain at default values.

The look-up table 12 is remote from the film units 10 during the use ofthe film units 10. Thus, the physical components of the look-up table 12are not internal to the film units 10 and are not portable with the filmunits 10. The look-up table 12 can be directly connected to, or a partof, one of the photofinishing units 14; but it is preferred that thelook-up table 12 is also remote from the photofinishing units 14. Thelook-up table 12 is preferably a networked computer or system ofcomputing and information storage devices. For simplicity, the look-uptable 12 is generally referred to herein as a single networked computer.

Remote access to the look-up table 12 is provided for the film units 10,by means of input devices 16. The photofinishing units 14 can alsoremotely access the look-up table 12. The input device 16 and film unit10, can write to, and preferably read from, a respective logical memoryunit 20.

The photofinishing units 14 can read from a logical memory unit 20 for aparticular film unit 10 and, preferably, can write some information tothe logical memory unit 20, such as a parameter that indicates the filmunit 10 has been processed. It is preferred that the logical memory unit20 be repeatedly writable by an input device 16 and by photofinishingunits 14. All information written to the logical memory unit 20 can bepermanently recorded, or some or all information in a logical memoryunit 20 can be made erasable. It is currently preferred that informationwritten by an input device 16 not be erasable by a photofinishing unit14 and vice versa. It is preferred that the look-up table 12 beaccessible on a substantially continuous basis, like the serviceprovided by public utilities. In other words, service is alwaysavailable, or at the least is available on a regular schedule, subjectonly to unavoidable exigencies, such as natural disasters and othercalamities.

The input devices 16 are used to customize the film units 10 by changingthe data in respective logical memory units 20. The input device 16communicates the respective identifier 42 and a desired customization tothe look-up table 12. (Communication is symbolized in the figures as asinusoidal wave.) The input device 16 can be limited to a terminalincluding a controller 39 having a microprocessor or the like having adisplay 43 and a keyboard or other input means 45. In this case, theidentifier 42 is manually input. Referring to FIG. 4, it is preferredthat the input device 16 also includes a station 92 to receive the filmunit 10 and a detector 62 disposed in the station 92 to read theidentifier 42 from the film unit 10. This helps ensure that thephotofinishing parameter 52 is provided for the correct film unit 10.Information can be manually fed into the input device 16 or can beprovided by accessing a portable information storage device such as asmart card. In the latter case, the input device 16 must have anappropriate interface for the storage device. The user can also provideinformation by inputting a customer number or the like to access adatabase. The database can be in the input device 16 or can be remote.The information provided by the portable storage device can be limitedto customer name, address, and account data or can also include userpreferences for one or more other photofinishing parameters 52. Theinput device 16 can be a single purpose device or can be anappropriately configured personal computer and peripherals. The detailsof the station 92 and detector 62 depend upon the manner in which theidentifier 42 is recorded. For example, if the identifier 42 is providedon the outside of a cassette 40 as a visible bar code 64, as shown inFIG. 4, then the detector 62 can be a hand-held bar code reader 66 andthe remainder of the station 92 can be a support surface, preferablyconfigured to dock the film unit 10, that is to receive and hold thefilm unit 10 in position. The bar code reader 66 has a light source 68,such as an array of light emitting diodes, and a detecting unit 70, suchas a lens system 72 imaging on a two-dimensional charge coupled device74. The input device 16 can also include a printer 76 to printinformation about the photofinishing parameters 52 on the film unit 10or a sticker 78 or the like. The input device 16 can print aphotofinishing envelope or can eliminate the need for a photofinishingenvelope. It is preferred, at least in any case in which aphotofinishing envelope is not used, that the input device 16 supply areceipt 80 to the user that documents the status of the film unit 10.

The interface and method of communication between the input device 16and the look-up table 12 is not critical. For example, the input device16 can incorporate and communicate via a dial-up modem or cancommunicate using a dedicated communication link or the Internet. Theinput device 16 could operate the look-up table 12 by remote control,but for reasons of security and convenience, it is highly preferred thatthe input device 16 act as a networked remote node.

Communication can be one-way (half duplex) or two-way (full duplex) fromthe input device 16 to the look-up table 12 and can immediately changethe look-up table 12 or change the table on a delayed basis. One waycommunication presents a risk of errors due to communications problems,equipment breakdowns and the like. Delayed communication can resolveerrors, but then requires multiple accesses for a single customization.It is highly preferred that communication be two-way and that allentries in the input device 16 be immediately confirmed as beingreceived and entered by the look-up table 12.

Referring now particularly to FIG. 5, the photofinishing unit 14 has anentry station 92, a processor 82, and an output unit 96. The processor82 includes: developing equipment 84, a digital input apparatus 86, acommunicator 88, and an image processor 90. The various components areconnected to the controller 94 by communication paths.

The entry station 92 is configured to receive individual film units 10in sequence. A detector 62 or reader is disposed in the entry station 92in a position to read the respective identifiers 42. The detector 62outputs identifier 42 values to the controller 94. The controller 94transmits the identifier 42 values to the look-up table 12 via acommunicator 88 (illustrated as a modem). The communicator 88 receivesthe identifier values and interfaces with the look-up table 12 totransmit the identifier signals to the look-up table 12 and to poll thelook-up table 12 for photofinishing parameters 52 corresponding torespective identifier 42. The appropriate photofinishing parameters 52are then downloaded to the controller 94. Features of the entry station92 and communicator 88 can be like those of the input device 16previously described.

The controller 94 receives photofinishing parameters 52 from the look-uptable 12 via the communicator 88. The controller 94 controls thedeveloping equipment 84, digital input apparatus 86, image processor 90and output unit 96 in accordance with the photofinishing parameters 52to process the film unit 10. The terms “process” and “processing” andlike terms used herein, refer broadly to the preparation of prints orother viewable images from film images or digital images, and areinclusive of printing, unless the context indicates otherwise.

The term “photofinishing parameters” used herein, refers to values forselectable aspects of processing. The “photofinishing parameter” is anelement of data, such as a binary number; a list; a data structure; arecord; or a software object, such as a unit of software, a text file,or an image. A photofinishing parameter can itself contain informationor can be a pointer to a source of information available elsewhere; forexample, in the same computer or through a network, such as theInternet. Specific parameters available and their values are dependentupon the capabilities of the equipment and software used for processing.The photofinishing parameters 52 control the operation of the processor82, preferably by changing settings on automated equipment.Photofinishing parameters 52 can be used to signal requests forprocedures requiring human intervention, but this is undesirable unlessused for exceptional procedures, since it adds continuing costs and therisk of human error. The particular photofinishing parameters 52customizable and available customizations are functions of theprocessing apparatus used. In the embodiment shown in FIG. 5, film ischemically processed in developing equipment 84, digitized by a digitalinput apparatus 86, modified by a digital image processor 90, andprinted by a digital output unit 96, after modification. Each ofcomponents 84, 86, 90, 92, and 96 can provide customizable options. Forexample, the developing equipment 84 can process film according to arated ASA/ISO or can optionally provide push or pull processing. Thedigital input apparatus 86 can scan at different resolutions. Thedigital output unit 96 can print on any of several different types ofmedia varying in size or finish or weight.

The image processor can provide an almost unlimited variety ofcustomizable options in addition to the digital image modificationsapplied to captured images as a part of ordinary processing, such asdigital inversion of colors as a part of digital printing from colorfilm negatives. These options can be roughly divided into twocategories: remedial efforts and alterations. Remedial efforts aredirected towards retaining the original information content, butimproving the perceived quality of an image. Alterations deliberatelymodify some of the original information content of an image.

FIGS. 2a-2 c illustrate a method for handling photofinishingcustomization data for a film unit 10 based on the system justdiscussed. A film unit 10 is provided and a logical memory unit 20 isallocated to the film unit 10. Film units 10 can be manufactured as acontinuous part of the process or can be manufactured separately. In theembodiment shown in FIGS. 2a-2 c, the film unit 10 begins as a filmcassette 40 and is transformed into a one-time use camera 24 by assemblyof the film cassette 40 into a one-time use camera body 26 (notseparately illustrated).

The logical memory unit 20 for a particular film unit 10 can beallocated to the film unit 10 at any stage in the manufacture of thefilm unit 10. The allocation can be limited to setting aside a range ofmemory, but preferably also includes setting up individual logicalmemory units 20 for each film unit 10 and associating identifiers 42with respective film units 10 by either recording identifiers 42 inrespective logical memory units 20 or structuring the table to indicatethe association between identifiers 42 and their logical memory units20. The logical memory unit 20 for a particular film unit 10 can also beallocated to the film unit 10 after manufacture, by the producer, or bya distributor or other reseller (hereafter referred to collectively as“dealer”). The logical memory unit 20 for a particular film unit 10 caneven be allocated to the film unit 10 after vending (symbolized in FIG.2a as a shopping bag 27) to the user. The term “vending” is used hereinto cover sale, trade, gift, exchange, or any other transfer of ownershipand/or control of the film unit 10 from one person or organization toanother.

Film unit customization, that is, the writing of changes inphotofinishing parameters 52 to the look-up table 12, can occur in thehands of one or more of the producer, the dealer, and the user. Like“dealer”, “user” is used herein as a collective term. Film units 10,particularly one-time use cameras 24 are commonly given as gifts, passedhand to hand for picture taking and otherwise used by more than oneperson. Absent limitations discussed below, the film unit 10 can becustomized at any point by the holder of the film unit 10.

The film unit 10 can be customized as a part of the assembly process bythe producer. This can be convenient where a large number of identicallycustomized film units 10 are required. For example, a large number ofidentically customized film units 10 can be provided for a particulardistributor or major sporting event. The film unit 10 can be customizedduring distribution by a dealer. This can be convenient forcustomization of moderate or small numbers of film units 10. Forexample, a batch of identically, or non-identically, customized filmunits 10 can be provided for a particular event such as a wedding. Thefilm unit 10 can also be customized after transfer to a final user. Thisis practical for customizing a single one-time use camera 24 or smallnumber of cameras. As a further convenience, the camera 24 can becustomized before, during, and after use; and when the film unit 10 isreturned as a container of processed film, the film unit 10 can befurther customized for reprints or other final images.

Customization is generally discussed herein in terms of one film unit 10and its associated logical memory unit 20, but it will be understoodthat multiple film units 10 can be customized at one time, if desired.For example, an input device 16 can repeat parameter modifications forall the film units 10 in a submitted list. Multiple film units 10 can becustomized at the same time in different ways to provide a group of filmunits 10 having different features. For example, a wedding group couldcombine color and black-and-white cameras. Customization can also beperformed in stages. For example, a producer can supply a distributor oruser with a camera or cameras possibly having some customizations alongwith instructions or appropriate software suggesting furthercustomizations. This approach may be desirable if the set of availablephotofinishing parameters 52 is very large and likely to proveburdensome to an inexperienced person.

The set of possible customizations will change over time andimprovements or alterations in possible photofinishing parameters willbe made. The system accommodates this kind of changes, since a user canchange parameters when additional photofinishing is requested.

When a film unit 10 is customized, the identifier 42 is communicated tothe look-up table 12 along with a desired change in at least one of thephotofinishing parameters 52 for the film unit 10. The look-up table 12receives the information and writes changes to the logical memory unit20 associated with the identifier 42 and film unit 10. In FIGS. 2a-2 c,a film unit 10 in the form of a film cassette 40 is assembled into aone-time use camera 24 body and a logical memory unit 20 is associatedwith the film unit 10. A copy of the identifier 42 is printed on theexterior of the completed one-time use camera 24. The one-time usecamera 24 is packaged. A copy of the identifier 42 can be printed on thepackaging 50, if needed, to allow customization of the film unit 10without removal of packaging 50.

The film unit 10 is first customized at this time. This is illustratedin FIGS. 2a-2 c as the addition of the photofinishing parameter “A” 98to the logical memory unit 20 for the film unit 10. The packaging 50bears an indicia 100, illustrated by a large letter “A”, whichcommunicates the customization to a purchaser. If desired, customizationinformation can be written to packaging 50, a film unit exterior, or anaddendum during any customization. The film unit 10 is then sold andcustomized by the user. This is illustrated in FIGS. 2a-2 c as theaddition of the photofinishing parameter “B ” 102 to the logical memoryunit 20 for the film unit 10. A series of images are captured and thefilm unit 10 is again customized. This is illustrated in FIGS. 2a-2 c asa change of the photofinishing parameter “A” 98 to photofinishingparameter “A1” 104. The film unit 10 is tendered for photofinishing andthe one-time use camera body 26 is removed. The photofinishing unit 14reads the identifier 42 on the film unit 10 and communicates with thelook-up table 12 to determine the photofinishing parameters 52 for thefilm unit 10. The look-up table 12 reports (retrieves) thephotofinishing parameters 52 and the film is processed in accordancewith those parameters. The photofinishing unit 14 also customizes thefilm unit 10. This is illustrated in FIGS. 2a-2 c as the addition of thephotofinishing parameter “C” 106 to the logical memory unit 20 for thefilm unit 10. The film unit 10 is returned to the user, along with finalimages (not separately illustrated). The film unit 10 is againcustomized and is returned for additional photofinishing. This isillustrated in FIGS. 2a-2 c as an addition of the photofinishingparameter “D” 108 and changes in the photofinishing parameter “A1” 104to photofinishing parameter “A2” 110 and photofinishing parameter “B”102 to photofinishing parameter “B2” 112.

The parameters 52 can be related to particular procedures to provide adetailed example. Referring to FIGS. 2a-2 c, the first customization isby the producer and photofinishing parameter “A” 98 can designateborderless photographic prints in pseudo-panoramic format (hereafter“pan” prints. The next customization is by the user and photofinishingparameter “B” 102 designates that the user wants the photofinishingproduct 22 returned by mail and supplies a mailing address or the like.The next customization is also by the user and indicates pan prints witha particular border. The next customization is by the photofinisher. Thephotofinishing parameter “C” 106 is added to indicate that the film unit10 has been developed and any future processing would exclude filmdevelopment. The next customization is again by the user. Thephotofinishing parameter “A2” 110 indicates pan prints with a differentborder. The photofinishing parameter “B2 is a new return address for theuser. The photofinishing parameter “D” 108 lists the negative from whichadditional prints are requested. It will be apparent from this example,that the photofinishing parameters 52 can relate to any photofinishingservices for a particular film unit 10. Other services or productsunrelated to photofinishing of that film unit 10 could also be provided,but this would likely be of limited utility unless the services orproducts had some relationship to the images captured in the film unit10.

Customization, as the term is used herein, is limited toexposure-independent information, that is information that isindependent of variable camera and/or scene factors at the time of imagecapture. Those factors, which are referred to herein as capture devicerecorded information, are commonly captured at the time of imageexposure. For example, some Advanced Photo System™ cameras recordshutter speed, flash usage, and camera-to-subject distance for eachexposure. Referring now to FIG. 19, the film unit 10 can include a localdata memory 114 for storage of capture device recorded information. Theform of the local data memory 114 is not critical. For example, thelocal data memory 114 can be a magnetically recordable layer onphotographic filmstrip 36 or can be an electronic memory componentinstalled in a film cassette 40 or the body of a one-time use camera 24.FIG. 17 illustrates a film unit 10 and components necessary to utilizethe local data memory 114. In this case, the local data memory 114 is anelectronic memory unit or magnetically recordable region included withinor on the film cassette. Components necessary to utilize the local datamemory 114, such as a controller 121 and a read-write device 122, can besupplied in the film unit 10 or can be supplied by the input device 16or the camera or other device.

As in the Advanced Photo System™, the local data memory 114 can also beused to carry photofinishing parameters that provideexposure-independent information such as the user's name and the user'stitle for the whole filmstrip. The camera writes the photofinishingparameters to the local data memory 114 either automatically or at theuser's option.

FIG. 8a illustrates an embodiment of the method for storing capturedevice recorded and exposure independent information related to a filmunit. A logical memory unit 20 is allocated (604) to the film unit 10.Photofinishing parameters providing exposure-independent information arewritten (214) to the logical memory unit 20 as previously described,before or after (806) image capture (216) or both. Photofinishingparameters providing capture device recorded information are written(810) to the local data memory 114 for each image capture (812) orotherwise. The capture device recorded information is read (819) duringphotofinishing by appropriate equipment and the exposure-independentinformation and any other photofinishing parameters in the logicalmemory unit are retrieved (815). The film unit is then processed (821)in accordance with the capture device recorded information, andexposure-independent information and any other photofinishing parametersin the logical memory unit. Conflicts between the two sources ofinformation are likely to be uncommon and can be handled bypredetermined priority rules. It is preferred that the identifier 42 forthe film unit 10 be recorded in the local data memory 114 to help ensurethat information is handled appropriately when the local data memory 114is read during photofinishing.

Referring to FIGS. 8b and 21 a-21 b, at the time of processing, theexposure-independent information can be retrieved (314) from the logicalmemory unit (unless already retrieved) and can be recorded (816) in thelocal data memory 114. In FIG. 21a, the identifier “X” (referencenumeral 101) appears in the local data memory and logical memory unitalong with prerecorded photofinishing parameters “B” (reference numeral102) and “E” (reference numeral 126). Images are captured and the filmunit is initially photofinished. Parameters not useful in futurephotofinishing are deleted from the logical memory unit. In FIG. 21, “E”is deleted and “C” is posted, which is a parameter that indicates thefilm has been processed. If desired, the exposure-independentinformation can also be read and recorded (816) to the local data memorywhen the film unit is placed in an input device and the logical memoryunit is accessed. The recording in the local data memory provides aback-up for the logical memory unit 20. The logical memory unit can beflagged (817), indicated by the letter “F” (reference numeral 124) inFIG. 21, to indicate that the exposure information has been archived tothe local data memory. The logical memory can be maintained (823) forsome predetermined time period. The “flag” can indicate a maintenanceperiod. The photofinishing parameters recorded in the local data memorycan then be removed (825) from the logical memory unit in the look-uptable 12 or the logical memory unit for the film unit can be dissociatedfrom the film unit, that is, deleted (818), or both can be done insequence. If the logical memory unit is retained, the includedinformation can be limited to the posted identifier and a flag, “G”(reference numeral 125) in FIG. 21, that indicates that photofinishingparameters have been archived and deleted, or simply deleted. Thephotofinishing unit can use the flag “G” to actuate reading of the localmemory unit of the respective film unit. This can save considerablespace in the look-up table. If the film unit is submitted for furtherphotofinishing later, a new logical memory unit can be allocated toreplace (820) the deleted one and the parameters in the local datamemory can be posted (822) to the replacement logical memory unit. InFIG. 21, the flag “F1” (reference numeral 123) with a new maintenanceperiod replaces the earlier flag “F”.

Customization of a film unit 10 using exposure-independent informationrequires, at a minimum, that the logical memory unit 20 for a particularfilm unit 10 must be maintained until photofinishing parameters 52 arereported to an appropriate photofinishing unit 14. It is preferred thatthe logical memory unit 20 remain accessible for repeated customizingbefore and after an initial photofinishing and accessible for repeatedreports to photofinishing units 14. The simplest solution is for thelook-up table 12 to keep all the parameters in all logical memory units20 indefinitely. The storage space required would be manageable, sincealthough the number of film units 10 would be very large, the totalinformation stored per unit would be small or could be made small bydeleting some information. Logical memory units 20 can also bemaintained for a predetermined time period, such as five years from dateof sale or five years from the last photofinishing event. Since theidentifier remains unique, a logical memory unit 20 that has beendeleted can be reallocated automatically when the film unit 10 is placedin an input device 16 or photofinishing unit and the look-up table isaccessed. Photofinishing parameters 52 can be recreated at that time orcan be restored from values in a local data memory 114.

In addition to maintenance of the logical memory unit 20, customizationalso requires that the photofinishing unit 14 access the logical memoryunit 20 and perform photofinishing in accordance with the recordedphotofinishing parameters 52. Referring now to FIGS. 5 and 7, a sequenceof film units 10 are fed into the entry station 92 of the photofinishingunit 14 by automated material handling equipment or manually. The entrystation 92 receives (302) one film unit 10 at a time. (Multiple entrystations 92 can be utilized in tandem, if desired.) The film units 10can be sorted by identifier 42 or prearranged in some other manner, butordinarily, the film units 10 are a mixture in random order byidentifier 42. The mixture of film units 10 can include film units 10 inwhich an identifier 42 is damaged or missing. The mixture can includefilm units 10 in which the identifier 42 is unreadable or spurious dueto error, or damage, or deliberate counterfeiting. The mixture canfurther include film units 10 in different states. For example, some ofthe film units 10 can include undeveloped film having captured, latentimages; while others of the film units 10 can include previouslydeveloped film having captured, developed images, returned for furtherphotofinishing. The mixture can also include undeveloped film units 10requiring different development processes.

Once in the entry station 92, the film units 10 are checked (304) forthe presence of a readable identifier 42. The reader is directed at thefilm units 10 and the identifier 42 is read, or found unreadable. It ishighly preferred that this step is automated, thus it is also preferredthat the film units 10 are standardized in shape and position ofidentifier 42 to ensure easy and accurate reading of identifiers 42. Ifthe identifier 42 of a particular film unit 10 is found to beunreadable, then that film unit 10 is culled (306). The culled film unit10 is then subject to special handling. For example, the film unit 10can be processed individually or returned to the submitter or a newidentifier 42 can be placed on the film unit 10 and the film unit 10 canthen be resubmitted to the entry station 92. An identifier 42 isunreadable if no identifier 42 information can be obtained or if theinformation is noticeably incorrect in some way. For example, anidentifier 42 can include a checksum or other error checking code, whichwould render an identifier 42 unreadable, if incorrect.

After reading the identifier 42, the photofinishing unit 14 accesses(308) the look-up table 12 and polls (310) the look-up table 12 todetermine if the identifier 42 is listed. If the identifier 42 isunlisted or otherwise unidentified, the film unit 10 is culled (306) andhandled separately as previously described. The photofinishing unit 14receives (314) from the look-up table 12 a report of photofinishingparameters 52 for each film unit 10 having a listed identifier 42 andprocesses (316) the film unit 10 in accordance with the respectivephotofinishing parameters 52. The photofinishing parameters can then bechanged (214) in the look-up table to indicate that the film wasprocessed and, if desired, record other information about theprocessing. The process can be repeated (320) for additionalphotofinishing of the same film unit.

Photofinishing parameters 52 can be obtained from the look-up table 12as needed immediately before processing of a film unit 10 or can beearlier obtained and then stored within the controller 94 of thephotofinishing unit 14 until needed.

Processing will vary depending upon the photofinishing parameters 52.For digital film units or previously developed film type film units 10,the photofinishing parameters 52 will indicate that currentphotofinishing is exclusive of film development. When a film unit 10 isfirst developed a change can be written to the photofinishing parameters52 in the respective logical memory unit 20 of the look-up table 12 toindicate that the film was developed. Other changes can be written torecord characteristics of the processing, as desired. For undevelopedfilm units 10, the photofinishing parameters 52 can include parametersthat control sorting equipment to sort the film units 10 to differentprocesses and set up parameters for automated developing equipment 84providing those processes. Photofinishing parameters 52 for printing caninclude digital alteration of images, selecting of media for hard copyor digital copies, selection of particular promotions, and the like.Table 1 lists some examples of categories of photofinishing parameters52.

TABLE 1 Optical distortion correction Lateral color optical defectcorrection Edge sharpening Contrast correction Color saturationcorrection Improve grain, contrast, and color in underexposed picturesFilm latitude improvement Grain reduction Improve color accuracy Zoomingand cropping Intentional distortion Solid color fill as in comic bookpictures Soft focus effects Contrast exaggeration or reductionMonochrome (black-and-white, sepia) Redeye removal Texture effects Printonly outlines, like a coloring book Add predetermined titles or logos tofront or back Solarization effects Special borders or other photomontageAdd Copyright message Sticker prints Poster prints Double printsSelected paper surface finish Selected digital medium Stock photo orpromotional item with order Delivery by mail including delivery addressBilling information User information included on prints Intemet servicesIntemet or other network paths to particular services

The photofinishing parameters 52 can be recorded in the table asdetailed instructions to control automated photofinishing equipment, orthe like, or can be recorded as pointers to databases containing thoseinstructions. The databases can be remote from the equipment or can beincorporated within individual devices or groups of photofinishing units14. In a preferred embodiment, the identifiers 42 are numbers that forma consecutive continuous series. A look-up table 12 is allocated suchthat each logical memory unit 20 of that look-up table 12 corresponds toone and only one member of the series of identifiers 42. The look-uptable 12 contains only pointers to other data records. Initially, thepointers are all set to some value that indicates “no data”. Whenphotofinishing data is added to the logical memory unit 20 correspondingto the physical film unit 10, a pointer to a record containing relevantdata replaces the “no data” pointer. If film characteristics are pointedto when the film unit 10 is manufactured, a subsequent valid request fordata for a film unit 10 should never result in a “no data” message.

The look-up table 12 contains important information that should not besubject to a risk of easy accidental or malicious damage. A measure ofsecurity can be provided by use of an access code 128 that must besubmitted for access to the logical memory unit 20 for the film unit 10having that serial number. The access code 128 can be a part of theidentifier 42 or can be supplemental to the identifier 42. (Access codes128 in the form of encrypted cognates of a human readable label numberare discussed below.) The access code 128 is recorded in the respectivelogical memory unit 20 or is instead recorded in a gatekeeper 130, aphysical or logical part of the look-up table 12, which limits access tothe logical memory units 20. For access to be granted to a particularlogical memory unit 20, both the identifier 42 and the access code 128must be submitted and matched. The use of the access code 128 protectsagainst misuse of the look-up table 12. Incorrect access codes 128submitted with correct identifiers 42 likewise block access. To beuseful, the access code 128 needs to be somewhat individual to aparticular film unit 10 and available to the holder of the camera whencustomization is desired.

Referring now particularly to FIGS. 9 and 10, the access code 128 for aparticular logical memory unit 20 is transferred along with therespective film unit 10. The logical memory unit 20 has an access rightthat is secured by the access code 128. The manner in which the accesscode provides security can vary. For example, with a logical memory unit20 that is a separate computer file, the access code can be a passwordthat must be supplied before reading or writing or otherwise accessingthat file in some manner. The access right can be limited to readingonly, or limited in some other manner; but preferably includes rights torepeatably read from and write to the logical memory unit 20. The holderof the film unit 10 thus also has control of the photofinishingparameter choices provided by the logical memory unit 20. Referringspecifically to FIG. 9, the film unit is prepared and the access code isgenerated (404). A logical memory unit having an access right secured bythe access code is allocated (604) to the film unit. This allocation canuse an identifier in the manner above described. The access code isrecorded (412) for inclusion with the film unit. This recording can beon the film unit, packaging for the film unit, a slip of paper or otheraddenda, or in some other manner that provides access to the user of thefilm unit; but otherwise maintains secrecy. The film unit is sold orotherwise transferred (406). Photofinishing parameters can be posted(214) to the logical memory unit before or after vending (406) or both.The access code is transferred (414) with the film unit. The film unitis used to capture (216) images and the images are later photofinished(218) in accordance with the photofinishing parameters in the respectivelogical memory unit at the time of photofinishing. It is highlypreferred that the access code be only available to the film unitpurchaser or transferee after transfer and that write access rightscontrolled by the access code not be retained by the producer aftertransfer of the film unit and access code.

To prevent inadvertent disassociation of the access code 128 and filmunit 10, it is preferred that the access code 128 is recorded on thefilm unit 10 independent of the image store, that is, independent of thefilm or for a digital unit, independent of the digital storage area. Theaccess code 128 can be a human readable password 132, such as a seriesof alphanumeric characters, that is keyed in when the look-up table 12is accessed. The access code 128, in this case, can be recorded on thefilm unit 10 in the same manner as the identifier 42. An advantage ofthis approach is that an ordinary personal computer can be used as aninput device 16. A shortcoming of this approach is that it is difficultto record the password on the film unit 10 so as to be readily availableto the holder of the film unit 10 and simultaneously unavailable toother parties. The access code 128 can be provided on a slip of paper134 or the like, supplied with the film unit 10, but this presents arisk that, over time, the access code 128 will be lost by the user.

The access code 128 and identifier 42 can both be recorded on the filmunit 10 or on a container for the film unit 10 in human andmachine-readable form. Other forms of identification, such as a creditcard, may be required for changes in parameters that would cause theuser to incur an additional charge. The access code 128 can be recordedon the film unit 10 in a non-public machine-readable form. Theidentifier 42 is preferably also machine-readable. It is convenient ifthe identifier 42 is also human readable.

Reading a machine-readable access code 128 requires the use of an inputdevice 16 having a suitable detector 62. It is also preferred that theaccess code 128 is embedded in the film unit 10, that is, recorded in amanner that is not alterable without damage to the film unit 10. Forexample, an embedded access code 128 can be provided in a non-alterablemagnetic stripe 136 on the exterior of the film unit 10 in the samemanner that magnetic stripes are commonly provided on credit cards. Anembedded access code 128 can similarly be provided in an electronicmemory component or other local data memory 114 attached to the exteriorof the film unit 10 or mounted in the interior of the film unit 10 andaccessible through electrical connections. In FIG. 10, the film unit 10is a one-time use camera 24, which has a magnetic stripe 136 on theexterior of the camera body 26. The camera body 26 is cut-away to show afilm cassette 40 that also has a magnetic stripe 136. Both magneticstripes 136 have an access code 128 for the same logical memory unit 20.The camera body 26 and film cassette 40 each also have an identifier 42and indicia 100, which indicates that the film unit 10 has an accesscode 128. In FIG. 10, the indicia 100 is the phrase “access-coded”.

Access codes 128 can be provided on both the film unit 10 and onpackaging 50, in the same manner as identifiers 42, but this presents arisk that secrecy of the access code 128 will be lost when the packaging50 is discarded.

The film unit 10 and its logical memory unit 20 are utilized aspreviously discussed, except that the access code 128 must be generatedand recorded in the film unit 10 and look-up table 12 and the accesscode 128 must be recognized for access to the look-up table 12.

The access code 128 for a particular film unit 10 can be generatedbefore or after allocation of a logical memory unit 20 to the film unit10. It is preferred that embedded access codes 128 be generated andrecorded in the film unit 10 during manufacture of the film unit 10. Itis also preferred that identifiers 42 be generated and logical memoryunits 20 be allocated during manufacture.

The label number, access code, and identifier can all be fully discretefrom each other. Alternatively, a single alphanumeric string or thelike, can act as label number, identifier, and access code. Intermediatestates are likewise both possible and practical. For the purposes ofexplanation, in the figures, the access code is generally separate fromthe identifier and the label number is also separate.

Referring now to FIG. 12, the access code 128 can have two segments orparts, one of which is an encryption of the other. The identifier 42 ofthe film unit 10 can include one or both of the segments. The look-uptable 12 only grants the user or other holder of the film unit 10 accessto the remotely stored data in the look-up table 12 if a code valueobtained by decrypting a submitted first segment, matches a secondsegment. In accessing the look-up table 12, the film unit 10 isregistered and the encrypted first segment of the access code 128 isdetected. The registering preferably includes docking (138) the filmunit 10 in an input device 16 and reading (140) the first segment, forreading the identifier 42. The maintained key 152 is then accessed(142). The first segment is then decrypted (144) and matched (146) tothe second segment. If a match is found, then access to the logicalmemory unit 20 for the respective film unit 10 is allowed (148). If nomatch is found then access is denied (150). The same steps are followedfor docking in an entry station 92 of a photofinishing unit 14. In thephotofinishing unit 14, the film unit 10 is culled if access is denied(1 50) and the film unit 10 is handled separately.

The locations and use of the different segments of the access code 128vary in different embodiments. In some embodiments, both first andsecond segments of the access code 128 are present on the film unit 10.Referring now particularly to FIGS. 10-12, the second segment of theaccess code 128 is the label number of the identifier 42 and is recordedin human-readable and machine-readable form on the exterior of the filmunit 10. The encrypted first segment of the access code 128 is recordedon the exterior of the film unit 10 in machine-readable form only. Thesegments can also be recorded on the film unit 10 in other manners. Forexample, the first segment can also be recorded in human-readable form44. The use of the first and second segments can also be reversed; thatis, the first segment can be recorded on the film unit 10 as the labelnumber. This approach is only desirable if the ciphertext used in theencrypted first segment is limited to ordinary alphanumeric characters.

In particular embodiments, the key 152 that is used to decrypt theencrypted first segment of the access code 128 is not recorded on thefilm unit 10. Referring to FIG. 11, the key 152 can be maintained andsupplied by the input or photofinishing unit 14. Referring again to FIG.11; the key 152 can alternatively be maintained and supplied by agatekeeper 130, a portion of the look-up table 12 that controls accessto the logical memory units 20. The decryption can be performed in thelook-up table 12 or, alternatively, in the input device 16 andphotofinishing units 14. It is convenient if the decryption is performedin the same component that supplies the key. In either case, upondecryption, the first segment is matched to the second segment. Thesecond segment is read from the film unit 10 either just prior tomatching or at some earlier time. When a match is found, access to therespective logical memory unit 20 is granted, either directly by agatekeeper 130, or by means of an authorization signal that is sent tothe main portion of the look-up table 12.

The key 152 for the encrypted first segment can be based on a symmetricencryption-decryption algorithm, in which the same key 152 is used forencryption and decryption; or on an asymmetric encryption-decryptionalgorithm, in which different keys 152 are required for encryption anddecryption. The latter is preferred, since the encryption key 152 can beclosely held. This reduces the risk that the encryption key 152 will bemisappropriated and used to produce counterfeit film units 10, whichcould cause the corruption of valid information in logical memory units20 in the look-up table 12. The key 152 can also take the form of acodebook, a table linking respective first and second segments, whichmay or may not be cognates.

Referring now to FIGS. 14-15, in some embodiments, the film unit 10bears only the encrypted first segment. The second segment is presentonly in the look-up table 12. The film unit 10 can include a serialnumber or label number that is not related to the access code 128 byencryption or decryption. Referring to FIG. 12 and 13 and 15, the firstsegment can be decrypted by a key 152 retained in a gatekeeper 130,input device 16 or photofinishing unit 14. The code value produced bythe decryption is then transmitted to the main portion of the look-uptable 12 and is matched to the second segment present in the look-uptable 12.

In the system of FIG. 1, the entry for each film unit 10 in the look-uptable 12 includes the identifier 42 and no additional information or oneor more changes from default photofinishing parameters 52. In analternative system having the look-up table separated into subunits,each logical memory unit 20 in the look-up table 12 includes two or moresubunits, each having a different class of information. The subunits canbe logical or physical partitions and can be differentiated from eachother in the same manner as the logical memory units 20. Separate userand producer subunits are convenient, but any number of subunits can beprovided for any purpose. For convenience, this system and method isgenerally discussed herein in terms of the user and producer subunit,but it will be understood that these terms are descriptive, but notlimiting.

Referring to FIGS. 11 and 13 the film unit is manufactured, user andproducer access codes 151,153 are generated (902)(904) and a logicalmemory unit having user and producer subunits is allocated (906) to thefilm unit. Photofinishing parameters are designated (908) as previouslydescribed herein and the film unit is sold or transferred (406). Theuser access code is transferred with the subunit (912) and the film unitis used to capture (216) images. The logical memory unit is maintained(915) and changes in parameters can be posted to the logical memory unit(917) from the user after access is achieved (919) using the accesscode. The film unit is submitted for processing, photofinishingparameters are reported (914) to the photofinishing unit, and the filmunit is processed (916) in accordance with the parameters. Prior to thecompletion of processing, the producer access code is provided (914) tothe photofinishing unit. The access code can be in the film unit, suchas being recorded optically on the undeveloped filmstrip for readingafter film development. The producer access code can also be suppliedseparately. The photofinishing unit can be provided with a list ofaccess codes on a regular basis, a common code can be used for a seriesof film units, or the access codes could be sent individually as needed.The photofinisher can instead be granted read access to the producersubunit without a specific code. If desired, the photofinishing unit canbe allowed to write only, to a separate photofinisher subunit of thelogical memory unit, information about the photofinishing and the statusof the film unit as having been developed or otherwise photofinished.

The user subunit 156 has a class of information, referred to here as“user data 160”, that consists of user alterable changes from defaultphotofinishing parameters 52 like those previously discussed. Theproducer subunit 158 has a second class of information, referred to hereas “producer data 162”, that is subject to modification only by theproducer or producer's designee. This class includes standard processingdata like film type and number of images; remedial image customizations;and historical information useful for market studies, such as dates offilm manufacture and initial user customization.

TABLE 2 User data 160 in user Producer data 162 in Event subunit 156producer subunit 158 Origin Identifier 42: Identifier 42: ABCDEF123456ABCDEFl23456 Processing parameters: Film subtype: A default Defect:camera lens-J8 Promotion: poster (limited Census data: batch-13579 time)Vending Identifier 42: Identifier 42: ABCDEFl23456 ABCDEF123456 Options:sepia Film subtype: A User info: John Doe, 1 Defect: camera lens-J8 MainSt., The City Census data: batch: 13579, Promotion: poster (limitedsale-2468 time) Retum for ID: ABCDEFl23456 ID: ABCDEF123456 processingUser info: John Doe, 1 Film subtype: A(age state l) Main St., The CityDefect: camera lens-J8 Promotion: poster (limited Census data: batch:13579, time) sale-2468, processing-3456 Second set to: My friend, 2 MainSt., The City Second set options: b&w Reprints 1 Identifier 42.Identifier 42: ABCDEF123456 ABCDEF123456 Options: Image #3,#7 color Filmsubtype: A(age state 2) (default), size 6R, Defect: camera lens-J8 Userinfo: John Doe, 1 New Census data: batch: 13579, St., The Citysale-2468, processing-3456, Promotion: (expired) later sales-5678

Table 2 provides an example of the types of data that could be stored inuser subunits 156 and producer subunits 158. The producer subunit 158can be stored in the look-up table 12 in the same manner as the usersubunit 156, but can be accessed differently or alternatively can bephysically separated in another site or memory device, or the like. Ineither case, both the user data 160 and the producer data 162 ispresented to the processing apparatus when the look-up table 12 isaccessed. It is preferred that any possibility of conflicts between userdata 160 and producer data 162 be foreclosed. This can be done bylimiting available options at the time of user customization, inaccordance with prerecorded producer data 162. Suitable software forthis function can be provided as a part of the look-up table 12 computeror alternatively in an input device 16. If conflicts are possiblebetween user data 160 and producer data 162, then selection rules can beprovided to permit user data 160 or producer data 162 to dominate inappropriate circumstances. More than two classes of information can beprovided. For example, users can be allowed to subdivide information andprovide limited access to others. A separate subunit and class ofinformation, such as available promotions, can be provided fordistributors. A separate subunit and class of information can beprovided for unalterable information. This can be used, for example, torecord that the film unit 10 was processed. This unalterable subunit canalso include permanent customizations of the film unit 10, such asprepaid double prints on all future reprints from that film unit 10.

It is preferred that the two subunits of the logical memory unit 20 fora particular film unit 10 have separate access rights for writing or forboth writing and reading. Separate access codes 128, like thosepreviously described, can be supplied for each subunit. The access code128 for the user data 160 is transferred with the film unit 10 aspreviously described, but the access code 128 for the producer data 162is retained by the producer or a designee. The producer access code 128,or an access code 128 for another subunit, can be supplied to aphotofinisher or distributor or the like to permit recording ofphotofinishing information or distribution data or the like. Theproducer access code 128 and any additional non-user access codes 128are transferred independent of the film unit 10. The producer accesscode 128 can be a “master key” usable with any logical memory unit 20;but it is preferred to prevent data corruption, that all access codes128 have a one-to-one relationship to a single logical memory unit 20and single film unit 10.

Producer data 162 can be used to authenticate film-type film units 10and prevent erroneous duplication of identifiers 42 on film units 10.Although the memory allocation may be accessed many times, the filmstrip36 in the film unit 10 is only developed once. The developing can beused as an authentication event. A second, identically designated filmunit 10 requesting services later can flag an error condition that needsinvestigation and action. This provides a protection againstcommunication errors and against makers of counterfeit film units. Thesecond archive can still be developed, but does not receive the benefitsof look-up table information unless the identifier 42 is corrected orthe film unit 10 is otherwise designated as a non-duplicate. Some eventother than developing can be used as the authentication event. Forexample, the initial user customization could be utilized. Digital filmunits 10, obviously require such an alternative authentication event,since they do not require developing.

Referring again to Table 2, a film unit 10 can be customized tocompensate for a manufacturing defect in the image capture system, suchas a predictable lens defect in a one-time use camera 24, by the use ofan appropriate digital image modification. The compensation or cure ofthe defect may completely remediate the problem, but generally, thecompensation or cure is incomplete. The cure can be provided as a“counteractive” photofinishing parameter 52 in a producer subunit 158 ofthe respective logical memory unit 20. A user subunit 156 can also beprovided to allow other customization of the film unit 10, as previouslydiscussed.

Referring to FIG. 14, The film unit is manufactured with the “curable”defect (602). A logical memory unit is allocated (604), the film unit issold (406), images are captured (608), photofinishing parameters arewritten (214) to the logical memory unit and reported (512) to thephotofinishing unit, and the logical memory unit is maintained (610),and the film unit is photofinished (218) as discussed elsewhere herein.The exception is that a photofinishing parameter is written (616) to thelogical memory unit (preferably prior to vending (406)) that includes adigital compensation that is counteractive for the defect in the filmunit.

The term “counteractive” refers to a procedure that partially or fullyovercomes the defect, either by a direct compensation or indirectly bymaking the defect less obvious. The counteractive photofinishingparameter 52, like all other photofinishing parameters 52 discussedherein, can directly alter photofinishing equipment parameters or canpoint to an external database if that is used to automatically ormanually alter the photofinishing equipment or procedures as required.The photofinishing parameters 52 can even point to a series of databasesand algorithms that are consulted to provide ultimate controls for thephotofinishing equipment and procedures. For example, a logical memoryunit 20 can provide camera identification that causes photofinishingequipment to consult a camera correction information database that inturn indicates settings for the photofinishing equipment.

The term “image quality defect” and like terms are used herein to referto one or more impairments of the film unit 10 which are detrimental tothe capture of representational images. The image quality defect causesone or more measurable degradations in the quality of a captured image,when compared with the image which would be obtained in the absence ofthe defect. The image quality defect is selected so as to provide a netbenefit to the imaging system. For example, the cost of picturepreparation and the weight of the camera can be reduced by use of simpleand lightweight, but optically defective lenses. The defect in eachcamera is within a predetermined tolerance of a predefined nominaldefect. The memory allocations associated with the identifiers 42 forthe cameras each include a processing parameter that designates adigital compensation that overcomes, or at least remediates, the nominaldefect. The “image quality defect” includes defects that do not directlycause image degradation in all photofinishing devices, but can causeimage degradation in some devices unless appropriate countermeasures aretaken. The “image quality defect” also includes intermittent orotherwise variable defects that will only appear under some conditionsof camera usage, such as red eye due to the presence of a flash unit toonear a camera lens.

The term “quality degradation” and like terms are used herein to referto deleterious changes in measurable parameters of the captured imagerelating to quality. Those parameters quantify sharpness, spatialfrequency modulation response, colorimetric matching, and achromaticgray scale matching.

Each of the quality degradation parameters can be measured in variousways. Sharpness is generally expressed as acutance. “Acutance” is ameasure of the apparent sharpness of edges in an image and is defined,as to a particular edge, as the average squared rate of change of thedensity across the edge divided by the total density difference from oneside of the edge to the other side of the edge. The spatial frequencymodulation response is generally expressed as the modulation transferfunction at one or more defined frequencies. Colorimetric matching canbe found by reference to a standard. Brightness can be expressed as theradiant intensity of light reflected from a print as measured underspecified angle and illumination conditions.

The quality degradation is a characteristic of the captured image as awhole, but can be uniform for an entire image or can vary geometricallyacross the two dimensions of the image. Degradations can be categorizedas: point degradations, spatial degradations, chromatic degradations,and degradations that are combinations thereof.

The term “point degradation” is used herein to refer to alterations inimage information in which a point in the captured image is subject toone or more modifications that are independent of the modifications ofthe other points in the captured image. Categories of point degradationsinclude: geometric coordinate transformations in which information isrelocated from one point to another, and additive and multiplicativeeffects in which a numerical value of information at a point isincreased or decreased. Examples of exposure system and capture systemfeatures which can cause degradations that are predominantly pointdegradations are film grain and lens tube shading.

The term “spatial degradation” is used herein to refer to alterations inimage information in which a point in the captured image is subject toone or more modifications that are dependent of the modifications of theother points in the captured image. These alterations are also referredto as being subject to integration or spatial smearing. Categories ofspatial degradations include: diffraction-limited optical systems;first, second, and higher-order optical system aberrations; defocusing;and object-film plane image motion blur.

The term “chromatic degradation” is used herein to refer to alterationsin image information in which a point in the captured image is subjectto one of more modifications in a numerical value of one or more of theaxes of a colorimetric space.

The image quality defect is intentional and preplanned prior tomanufacture of the camera. The manufacture of camera parts within closetolerances to improve image quality is well known to those of skill inthe art. In the invention, manufacturing processes are tightlycontrolled so that each camera, within a family of cameras, has the sameimage quality defect, that is, a defect that is within close tolerancesof a nominal image quality defect and produces an image qualitydegradation within similar close tolerances. The image quality defectand resulting image quality degradation are thus known and identified ineach camera when the camera is made and the defects and image qualitydegradations are thus uniform throughout the family of cameras.

The nominal image quality defect is selected so as to be fully, or atleast partially, curable as a part of a specific digital imagemanipulation procedure, also referred to herein as “digitalcompensation”, included in processing provided subsequent to exposure ofa number of images representing the storage capacity of the film unit10. Other digital image manipulation procedures, referred to hereafteras “responsive digital manipulations” and “editorial manipulations”, mayalso be provided as a part of the post-exposure processing. Inresponsive digital manipulations, the image is perceptively improvedbased upon knowledge of the content of the captured image or theconditions of image capture. This contrasts with digital compensation,which is preplanned along with the image quality defect. In editorialmanipulations, the captured image is modified without reference tooptical quality. For example, the captured image can be cropped andsections enlarged to provide different image formats and magnifications.Similarly, the image can be changed to no longer be representational ofthe light image originally captured. For example, color images can beremapped as gray scale images or image features can be modified,rearranged, or replaced to meet a particular artistic standard. In mostcases, it is preferred that responsive digital manipulations andeditorial manipulations be performed after digital compensation. Anexception would be where a portion of the captured image was cropped.

The terms “curable” and “cure” and the like, are used herein to describethe effects of digital compensation that provides a perceivedimprovement in an image. The digital compensation may completely reversethe effect of the degradation; that is, the digital compensation may bethe inverse of the image degradation caused by the defect.Alternatively, the digital compensation may only partly reverse thedegradation or only reduce the perception of the defect. For example,the digital compensation can blur an image captured on photographic filmto reduce visible “graininess” caused by large and irregularly sizedfilm grains. Different digital compensation procedures can be combinedto accommodate degradations caused by multiple image quality defects ina camera. It will be understood that the term “image quality defect” andlike terms used herein is inclusive of multiple defects; unless, incontext, a single defect is indicated.

Examples of digital compensation procedures include: tabular adjustmentof parameters, stretching or shrinking a range of a parameter, histogramequalization, assembly and balancing of mosaic images, aspect ratiocorrection, deskewing, and registration (rubber sheet stretching). Thelatter refers to correction of geometric coordinate transformations byremapping values in congruence with a predetermined point degradationtransformation function for a nominal average of the capture system.Geometric coordinate transformations include rotation, translation, andanisotropic scale changes.

Examples of responsive digital manipulations include digital edgeenhancement, smoothing and blurring, and sharpening procedures providediteratively through human mediation or an automatic image contentresponsive algorithm.

The processing parameter does not depict the actual defect in thecamera, but rather categorizes the actual defect as being subject tocure by the same digital compensation as a particular nominal defect.The processing parameter is thus associated with a particular nominalimage quality defect and with the appropriate digital compensation forthat nominal defect. The association can be direct or indirect. Theprocessing parameter can be a standardized designation for a particularnominal imaging quality defect. This requires the availability to thedigital processor 82 of a set of digital compensation subroutines or thelike, which are indexed to respective nominal image quality defects. Theprocessing parameter can instead be a standardized designation for thedigital compensation subroutine rather than the corresponding defect.The processing parameter can be a modification of such a designation.For example, the processing parameter could be the product of digitalcompression of a standardized designation. The processing parameter canbe the appropriate digital compensation subroutine for a particulardefect, or can be a set of instructions to the digital processor 82 asto generating an appropriate digital compensation subroutine.

Digital image alterations can be roughly categorized as: orthoscopic andnon-orthoscopic. In orthoscopic alterations, the final image remainsrepresentational of all or part of the original light image. Theoriginal light image is only altered by zooming, cropping, rotating, orsome combination of these procedures prior to output of a final image. Aplurality of non-modifying image modification states can be included, ifdesired to provide for different print formats or other zooming andcropping functions. In non-orthoscopic alterations, there is an imagemodification; that is, the image is non-orthoscopically altered prior tooutput of a final image. Orthoscopic image modifications can also beincluded with non-orthoscopic modifications. The nature of thenon-orthoscopic image modification states available is likely to bedetermined as a matter of user preference and the practical limitationsof printing equipment, such as color gamut. It is expected that onemajor preference will be for transmogrifications, alterations that areunsubtle (and often grotesque or humorous) and at the same time retainsufficient information content from the captured image so as to allowimmediate user recognition of the subject matter originally captured.Another preference is expected to be for what can be referred to as“artistic effects”, modifications that resemble stylistic changes ininformation content used in painting and other art forms.

Referring to Table 2 and FIG. 15, the system can be used to modifyphotofinishing parameters 52 to compensate for age related degradationof photographic film. A logical memory unit is allocated (604) to thefilm unit. Photofinishing parameters are designated (706) and an agingparameter for the category of film used in the film unit is initiallywritten. The “aging parameter” is referred to in the singular as aconvenience. Necessary information for aging compensation is expected tobe voluminous. The “aging parameter” can be a single pointer or seriesof pointers to separately stored information or the necessaryinformation can be written directly in the logical memory unit. Theinitial aging parameter can be a default, such that an empty record inthe logical memory unit 20 is a recording of the default agingparameter. The logical memory unit is maintained (710) available forwriting by input devices and reporting to photofinishing units.

Samples of the film category are kept (708) by the producer undercontrolled conditions that mimic expected aging in use. Aging can bemeasured separately for developed and undeveloped film. At intervalsduring the aging of the film samples, adjustments are determined (712)in the aging parameter that would counteract the effects of the observedaging. The aging parameter, in the producer subunits 158 of respectivelogical memory units 20, is then updated (714) to indicate current agingdata. Other photofinishing parameters are written to the logical memoryunits before and after sale of the film units as earlier discussed. Thefilm units are sold and used. Images are captured (216), parameters arereported (512) to the photofinishing unit, and the film is photofinished(218) in accordance with the photofinishing parameters including theaging parameter. The aging parameter can also be used in subsequentphotofinishing (218) to counter aging of film after development.

This approach to countering aging is necessarily inexact, sinceenvironmental conditions effect aging and actual conditions of film useand storage are unknown. On the other hand, some aging of film isunavoidable. That aging could be compensated for in all cases. Agingcompensation can also be provided, if desired, for anticipated averageconsumer or professional use of film units. Additional aging remediationcan be provided as a user selected photofinishing parameter 52.

In a particular embodiment of the method for compensating for filmaging, some film samples are withdrawn at intervals during aging and areexposed with standardized exposures and are developed at furtherintervals during aging to provide individualized aging characteristics,at the various time intervals, for unexposed film units, exposed andundeveloped film units, and developed film units. The agingcharacteristics are adjustments in photofinishing parameters tocounteract the effects of the observed aging under the expectedconditions of use. The film units are sold and used as above-described;except that exposure dates are recorded (720) in local data memory 114in cameras that can capture date of exposure for each image captured.Film units from such cameras are developed and the image exposure datesare read (722) from the local data memory. The photofinishing unitaccesses the respective logical memory unit and obtains the agingparameter. The countermeasures can be individually assigned by thelook-up table, but it is preferred that the individual countermeasuresare assigned and applied to respective images by the photofinishingunit. Separate countermeasures are applied to individual images based onthe respective image exposure dates. It is expected that countermeasureswill be assigned on the basis of calendar quarters or even longer timeperiods. Thus image exposure dates recorded in the local data memory canbe limited in the same manner, if desired. For example, days of themonth could be left unrecorded. The photofinishing unit can post to thelogical memory unit that aging countermeasures were used. Specificinformation about countermeasures used can be retained in the look-uptable to aid the user in making decisions about future photofinishing.

The system can be used to track status data for a film unit. Forexample, a manufacturer can keep a record in the look-up table ofmanufacture information for a film unit, and then have information addedto that record that relates to distribution and usage of the film unit.The information from different film units can be compiled and used totailor future film unit manufacturing to better match actual productusage. For one-time use cameras, information is also available to betterassess details of the used camera bodies that will become available forrecycling in the future. The film unit is manufactured and a logicalmemory unit is allocated (604) to the film unit. Initial status data iswritten (504) to the logical memory unit. This data is likely to includedate, time, and place of manufacture; date of distribution, and thelike. Initial photofinishing parameters are also designated (214). Thelogical memory unit can have multiple subunits as previously discussed.Identifiers, access codes, and other features of the film units areprovided as previously discussed. After vending (406), the film unit isused as previously discussed. Photofinishing parameters are entered ormodified by the user and received (510) by the look-up table and laterreported (512) to a photofinishing unit, as earlier discussed. When thelook-up table is contacted by an input device, additional status data isreceived (516) by the look-up table and recorded (517) in the logicalmemory unit. For example, the input device can communicate the date andtime a logical memory unit is accessed and prerecorded “credentials” forthe input device, such as location, serial number, and the like. Ifdesired, the receipt of the status data can be made a mandatoryprecursor to the updating (214) of photofinishing parameters in thelogical memory unit. The receipt of changes in photofinishingparameters, recording, receipt of status data, updating, and reportingsteps can be repeated for each time the logical memory unit is accessedby an input device or by input devices and photofinishing units. Statusdata in the logical memory units can be collected, maintained, cleared,and the like whenever convenient to the manufacturer.

The invention has been described in detail with particular reference tocertain preferred embodiments thereof, but it will be understood thatvariations and modifications can be effected within the spirit and scopeof the invention.

What is claimed is:
 1. A method for authorizing access to stored data,comprising the steps of: manufacturing a film unit usable for imagecapture; associating a logical memory unit with said film unit, saidlogical memory unit being physically remote from said film unit; duringsaid manufacturing, recording an access code for said logical memoryunit in said film unit, said access code having an encrypted firstsegment; vending said film unit following said manufacturing, recording,and associating; following said vending, registering said film unit,said registering including detecting said first segment; after saidassociating and prior to said registering, storing the data in saidlogical memory unit; decrypting said first segment to obtain a codevalue; matching said code value to a second segment; allowing access tosaid stored data.
 2. The method of claim 1 wherein said registeringincludes docking said film unit.
 3. The method of claim 2 wherein saidregistering includes docking said film unit in an input device andreading said access code from said film unit in said input device. 4.The method of claim 3 wherein said decrypting further comprisessupplying a decryption key in said input device.
 5. The method of claim3 wherein said decrypting is in said input device.
 6. The method ofclaim 1 wherein said registering includes keying in said access code. 7.The method of claim 1 wherein said registering includes docking saidfilm unit in a photofinishing unit and reading said access code fromsaid film unit in said photofinishing unit.
 8. The method of claim 7wherein said decrypting further comprises supplying a decryption key insaid photofinishing unit.
 9. The method of claim 7 wherein saiddecrypting is in said photofinishing unit.
 10. The method of claim 1wherein said second segment is recorded on said film unit.
 11. Themethod of claim 1 wherein said first segment recorded on said film unitis only machine-readable.
 12. The method of claim 11 wherein said secondsegment is human-readable and machine-readable.
 13. The method of claim1 wherein said second segment is recorded only in said look-up table.14. The method of claim 13 wherein said second segment is a cognate ofsaid first segment.
 15. The method of claim 1 wherein said decryptingfurther comprises maintaining a decryption key in said look-up table.16. The method of claim 14 wherein said decrypting is in said look-uptable.
 17. The method of claim 1 wherein said decrypting furthercomprises utilizing a symmetric encryption-decryption algorithm.
 18. Themethod of claim 1 wherein said decrypting further comprises utilizing anasymmetric encryption-decryption algorithm.
 19. The method of claim 1wherein said decrypting further comprises utilizing a codebook of saidfirst and second segments.
 20. The method of claim 19 wherein saidcodebook is in said look-up table.
 21. The method of claim 1 whereinsaid logical memory unit is a portion of a look-up table.
 22. The methodof claim 1 further comprising, following said registering, capturing aplurality of images in said film unit.
 23. A method for authorizing theholder of a film unit to access stored data, the film unit bearing anaccess code having an encrypted first segment, said method comprisingthe steps of: associating a logical memory unit to the film unit, saidlogical memory unit being physically remote from said film unit; aftersaid associating, storing the data in said logical memory unit;registering said film unit, said registering including detecting saidfirst segment; decrypting said first segment to obtain a code value;matching said code value to a second segment; allowing access to saidstored data, responsive to said matching; and after said allowing,capturing a plurality of images in said film unit.
 24. The method ofclaim 23 wherein said storing is prior to said registering.